Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
File: 3ILSx-tfpUPjLx7uGc01pWc8-uY.mft (raw, json)
Hash identifier: WWkFZMKyqLDQ6Xc59xN32En0MyJD3XnBV4i3WQLe51c=
Subject key identifier: 5A:CE:5B:2F:BB:50:FC:D6:DE:4A:54:C3:E5:FF:48:DD:9F:49:88:69
Authority key identifier: DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6
Certificate issuer: /CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6
Certificate serial: 01967E33B278AF0F52F66F6C599A6400ADBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
Manifest number: 03DE
Signing time: Mon 28 Apr 2025 21:00:39 +0000
Manifest this update: Mon 28 Apr 2025 21:00:39 +0000
Manifest next update: Tue 29 Apr 2025 21:00:39 +0000
Files and hashes: 1: 3ILSx-tfpUPjLx7uGc01pWc8-uY.crl (hash: ry82C/Kf6jIzu1uQv9AA5nH1m8vNclWmdIKXCe2m/Is=)
2: Mvk_oqElVRdnhvvvd2d0ON2M6O0.roa (hash: h/FNSiffcYfhZT3VlgEkLi4vidisAmOMBIjfYdnqCDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:b2:78:af:0f:52:f6:6f:6c:59:9a:64:00:ad:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6
Validity
Not Before: Apr 28 21:00:39 2025 GMT
Not After : Apr 29 21:00:39 2025 GMT
Subject: CN=5ace5b2fbb50fcd6de4a54c3e5ff48dd9f498869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:07:aa:21:d7:04:de:ea:08:2f:6b:f7:37:75:
08:2d:eb:1b:48:05:ef:76:74:f1:de:80:75:17:f6:
00:e0:7b:cd:2b:8f:36:1f:1f:89:f8:44:7e:44:ea:
a1:52:c3:5c:b7:23:5d:c0:fd:2a:cf:9c:76:e3:5f:
c6:a0:c6:5f:a5:6a:0b:6d:b9:62:67:f6:dc:c7:71:
37:79:c5:8b:bb:81:5a:73:73:f6:27:84:03:30:c2:
ce:c2:ad:20:60:02:a4:10:33:0f:52:d4:d3:47:e3:
a1:95:9d:d7:ee:6c:f6:68:a8:a3:f5:40:3b:bf:97:
4a:71:ff:3b:99:c9:b3:da:04:7d:95:9d:c4:f0:65:
75:02:b5:28:58:05:ae:11:aa:90:45:bc:bc:5c:ea:
7b:53:8d:e0:c4:f3:08:d1:11:46:9f:8c:0c:2f:6c:
50:f0:de:22:ff:97:0f:3c:34:72:a5:28:46:dc:82:
71:a4:24:4a:c4:4d:5c:ea:ca:e4:4b:c7:2a:bd:ec:
3b:fc:19:59:de:ae:b8:98:c5:68:06:c5:b3:26:67:
7d:e9:31:a8:c2:99:06:16:2a:59:e0:66:51:70:0a:
1c:e6:35:4d:df:40:24:01:e9:e7:ff:e4:b2:c6:46:
56:53:1a:da:75:a5:b5:d6:26:15:69:33:12:52:93:
d6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CE:5B:2F:BB:50:FC:D6:DE:4A:54:C3:E5:FF:48:DD:9F:49:88:69
X509v3 Authority Key Identifier:
keyid:DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:6f:96:6a:c1:09:af:18:8e:66:40:41:b7:cf:ae:0e:e2:2a:
23:a8:06:e1:66:2f:10:96:b8:51:7c:2f:be:b2:19:70:fd:35:
ae:ff:15:3e:e6:0a:9a:03:10:86:c0:87:c9:ed:27:f6:ee:af:
66:e2:a7:5f:86:07:20:b2:39:c4:7c:53:29:58:65:a4:bc:f8:
da:27:04:8a:a1:cd:bd:ee:d5:0d:25:5f:ed:fd:dc:82:37:12:
3e:e5:ae:65:e4:9b:66:f2:50:74:c0:66:6a:81:90:8e:a2:4b:
02:8c:c8:02:9d:a2:96:c8:14:36:d9:c7:95:aa:0a:fa:b1:b0:
28:87:35:e4:21:d0:17:70:90:ad:06:1b:74:6a:08:a1:30:0d:
15:aa:3d:35:94:c7:5f:90:3a:a2:46:42:ad:68:2e:10:4c:87:
88:0d:56:f8:4e:0a:f6:90:69:1f:dc:ee:87:56:7c:85:67:55:
85:54:75:1b:c3:d1:89:9f:2a:8f:d6:42:2f:2c:d1:f4:d3:81:
fd:14:f9:51:17:14:3c:da:bf:ed:eb:42:13:d2:f7:48:50:4d:
e1:cb:c6:84:ba:1a:3b:af:e0:51:6a:b9:b4:66:52:08:1f:fd:
7d:2f:15:99:62:10:19:66:66:4f:b4:d8:94:a9:28:54:a9:d1:
08:f8:e9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:33:13 2025 by rpki-client